Auditing Privileged Group Members Across All Domains
A PowerShell script that pulls members of all privileged groups across every domain in your forest.
Posts by Year
2024
2023
Delegating Domain Join Permissions with Least Privilege
Stop using Domain Admins to join machines. Delegate the exact permissions needed — nothing more.
Tracking Changes in Active Directory with KQL
Who changed what, and when? KQL queries for the most common AD change events.
Who Has Access to Your Servers
Audit local group memberships across your server fleet — because you need to know who has admin and RDP access.
Delegating Permissions in Active Directory
Stop using built-in operator groups. Delegate permissions properly with least privilege.
Fixing Rogue Object Ownership in Active Directory
Object ownership in AD grants implicit WriteDacl — a direct path to privilege escalation. Here’s how to detect and fix it.